ExamGecko
Question list
Search
Search

Question 50 - SPLK-3002 discussion

Report
Export

Which of the following describes enabling smart mode for an aggregation policy?

A.
Configure --> Policies --> Smart Mode --> Enable, select ''fields'', click ''Save''
Answers
A.
Configure --> Policies --> Smart Mode --> Enable, select ''fields'', click ''Save''
B.
Enable grouping in Notable Event Review, select ''Smart Mode'', select ''fields'', and click ''Save''
Answers
B.
Enable grouping in Notable Event Review, select ''Smart Mode'', select ''fields'', and click ''Save''
C.
Edit the aggregation policy, enable smart mode, select fields to analyze, click ''Save''
Answers
C.
Edit the aggregation policy, enable smart mode, select fields to analyze, click ''Save''
D.
Edit the notable event view, enable smart mode, select ''fields'', and click ''Save''
Answers
D.
Edit the notable event view, enable smart mode, select ''fields'', and click ''Save''
Suggested answer: C

Explanation:

1. From the ITSI main menu, clickConfiguration>Notable Event Aggregation Policies.

2. Select a custom policy or the Default Policy.

3. Under Smart Mode grouping, enableSmart Mode.

4. ClickSelect fields. A dialog displays the fields found in your notable events from the last 24 hours.

C is the correct answer because smart mode is a feature of aggregation policies that allows ITSI to automatically group notable events based on the fields that have the most impact on the event occurrence. You can enable smart mode for an aggregation policy by editing the policy, selecting the smart mode option, and choosing the fields to analyze. You can also specify a minimum number of events to trigger smart mode and a maximum number of groups to create.

Reference:Configure smart mode for aggregation policies in ITSI

asked 23/09/2024
franz yap
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first